I get them all the time, they're total scams. Why would a bank I have NO dealings with email me for my SSN, the most damaging thing you could give out online?

It's easy to tell if they're legit or not - look at the URL! (even those can appear real, but they're obviously not once you visit them) However, visiting such maliscious sites is a bad idea, anyway - who knows what malware they could install on your computer.

NO LEGIT COMPANY WILL *EVER* ASK FOR SUCH PRIVATE INFO VIA EMAIL!

How much convincing do you need?